https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:13:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-240709 EUVD-2026-240709 https://cve.radiocsirt.org/vuln/euvd-2026-240709 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40199 <p>Directory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote authenticated attacker with an administrative privilege to obtain the product&#39;s directory structure information.</p> <p>Directory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote authenticated attacker with an administrative privilege to obtain the product&#39;s directory structure information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-40199 https://cve.radiocsirt.org/vuln/ghsa-wjpv-frf2-3r58 <p><strong>Affected:</strong> Packagist: ec-cube/ec-cube</p> <p>Directory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote authenticated attacker with an administrative privilege to obtain the product&#39;s directory structure information.</p> <p><strong>Affected:</strong> Packagist: ec-cube/ec-cube</p> <p>Directory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote authenticated attacker with an administrative privilege to obtain the product&#39;s directory structure information.</p> https://cve.radiocsirt.org/vuln/ghsa-wjpv-frf2-3r58 https://cve.radiocsirt.org/vuln/gsd-2022-40199 gsd-2022-40199 https://cve.radiocsirt.org/vuln/gsd-2022-40199 https://cve.radiocsirt.org/vuln/jvndb-2022-000073 <p>EC-CUBE provided by EC-CUBE CO.,LTD. contains multiple vulnerabilities listed below. * Directory traversal vulnerability (CWE-22) - CVE-2022-40199 * DOM-based cross-site scripting vulnerability (CWE-79) - CVE-2022-38975 Noriaki Iwasaki of Cyber Defense Institute, Inc. reported these vulnerabilities to EC-CUBE CO.,LTD. and EC-CUBE CO.,LTD. reported them to JPCERT/CC to notify users of the solutions through JVN.</p> <p>EC-CUBE provided by EC-CUBE CO.,LTD. contains multiple vulnerabilities listed below. * Directory traversal vulnerability (CWE-22) - CVE-2022-40199 * DOM-based cross-site scripting vulnerability (CWE-79) - CVE-2022-38975 Noriaki Iwasaki of Cyber Defense Institute, Inc. reported these vulnerabilities to EC-CUBE CO.,LTD. and EC-CUBE CO.,LTD. reported them to JPCERT/CC to notify users of the solutions through JVN.</p> https://cve.radiocsirt.org/vuln/jvndb-2022-000073